$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft File: C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft (raw, json) Hash identifier: CxE67aJpPkgje5AfefAiTAfda+wlqBpWM+H4S0dghRQ= Subject key identifier: CA:56:39:D1:B0:5E:51:B3:E4:16:56:A6:42:10:BC:83:7A:B6:C7:98 Authority key identifier: C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD Certificate issuer: /CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Certificate serial: 650FE2F7F85649D5F5EDFEA34551B69BDC7723BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft Manifest number: 017A Signing time: Wed 15 Apr 2026 10:10:00 +0000 Manifest this update: Wed 15 Apr 2026 10:05:00 +0000 Manifest next update: Sat 18 Apr 2026 16:40:00 +0000 Files and hashes: 1: C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl (hash: s3pOb9Wmsapx4G0PX5IfNYuDMddfPKZX/9Uj9zoObkA=) 2: 3135372e31302e38382e302f32332d3233203d3e20313532303832.roa (hash: yHjDD2B7ssz0I97OhqKdQ6IMmUPUkeyrcBf6V6OA9mQ=) 3: 3135372e31302e38392e302f32342d3234203d3e20313532303832.roa (hash: tTSkb3LmGeKJ+KOwhCOQc0e57SI0T8wvWexMRiAu1K4=) 4: 3135372e31302e38382e302f32342d3234203d3e20313532303832.roa (hash: o3X95QY7fg1x907JEuK0Tti5YWHdGjRCJ0G2QdlLS9w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 16:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0f:e2:f7:f8:56:49:d5:f5:ed:fe:a3:45:51:b6:9b:dc:77:23:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1732571810C9D4976CD1A47D5584726CF0CC7BD Validity Not Before: Apr 15 10:05:00 2026 GMT Not After : Apr 18 16:40:00 2026 GMT Subject: CN=CA5639D1B05E51B3E41656A64210BC837AB6C798 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:e9:4f:01:8d:be:6b:0a:4b:bf:c3:a0:0f: e8:1a:68:fa:d0:ee:86:12:6d:3f:f0:f4:bb:37:45: 39:60:38:f5:2f:4e:0b:9b:28:d5:15:a1:41:78:be: 00:19:be:42:b4:0a:41:64:95:c7:f6:b6:7f:07:51: 80:0a:84:f5:28:3d:58:ac:c5:dc:f7:8e:f9:57:6a: ea:1f:c8:0f:fe:33:33:a9:59:2c:d5:55:91:3a:d4: 29:f2:a8:87:74:8a:c2:f3:07:30:13:e5:a5:7f:ec: b4:90:ee:72:3c:ed:2c:3e:e2:49:f1:64:87:e1:1c: ba:85:4d:18:b0:00:fc:5c:cd:79:80:ea:24:c0:1a: 87:40:96:b2:3d:bb:4a:94:02:5d:b1:8c:57:0b:0f: cd:10:ac:c9:83:b9:6b:9c:09:5a:18:a8:02:e9:b3: c9:be:d7:ba:70:3d:f6:f7:ce:ad:30:e0:03:3a:20: dc:1d:75:f5:99:6c:bb:f9:a5:9a:5f:db:62:d4:d6: 2e:9f:6f:75:a1:ca:c0:eb:53:4f:f3:bd:6e:0a:6f: 6c:61:dc:4d:6f:f2:90:0e:20:9a:f5:90:9f:e3:67: 2f:34:14:33:d8:70:55:72:bd:e7:35:9b:b2:30:fd: 07:c1:d9:e8:b2:f1:0d:ca:55:a9:c5:37:80:82:31: c3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:56:39:D1:B0:5E:51:B3:E4:16:56:A6:42:10:BC:83:7A:B6:C7:98 X509v3 Authority Key Identifier: keyid:C1:73:25:71:81:0C:9D:49:76:CD:1A:47:D5:58:47:26:CF:0C:C7:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C1732571810C9D4976CD1A47D5584726CF0CC7BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/0/C1732571810C9D4976CD1A47D5584726CF0CC7BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7d:e4:45:b0:0d:ec:d2:52:e9:cd:8b:e3:e6:6b:ef:3a:a5: e2:66:77:b6:c9:a9:b1:27:b6:ef:b5:47:90:47:21:02:a9:8e: cf:19:08:a3:dd:03:ac:2a:03:c5:fb:c7:a8:7a:21:39:7d:df: 0c:98:88:98:6c:84:1c:4d:5f:f6:04:ee:b4:b9:79:5e:0c:21: 47:23:98:2d:dd:8a:d2:d6:30:75:51:62:78:96:f5:ef:22:96: 40:78:45:76:44:b7:d8:26:c6:86:55:75:e7:a5:9d:4b:f6:0e: 41:d0:c5:f5:e6:68:92:99:86:a9:66:6e:63:aa:33:e9:af:2a: aa:25:3a:2e:1c:80:48:99:3a:73:a2:e3:f8:f9:82:ec:0b:78: 74:a8:2d:b3:e2:4f:87:b5:12:18:2d:09:06:23:d7:a0:30:f1: c6:6a:87:5c:17:83:ec:1a:4f:bb:18:b9:88:e7:b3:b0:e0:51: cc:2f:d9:93:8e:01:6b:62:75:de:18:fe:07:50:79:b8:cb:1d: ec:8d:8a:d4:20:32:d7:22:65:dd:da:e6:5e:5f:bb:cb:6f:b6: 65:a3:04:15:4f:a4:a6:32:79:1f:c6:64:da:1c:5f:0a:24:e5: 2b:7b:35:5c:69:36:31:5b:7d:57:f3:64:6d:7a:9c:bf:a4:ee: 18:bb:81:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZQ/i9/hWSdX17f6jRVG2m9x3I7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZD RjBDQzdCRDAeFw0yNjA0MTUxMDA1MDBaFw0yNjA0MTgxNjQwMDBaMDMxMTAvBgNV BAMTKENBNTYzOUQxQjA1RTUxQjNFNDE2NTZBNjQyMTBCQzgzN0FCNkM3OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5telPAY2+awpLv8OgD+gaaPrQ 7oYSbT/w9Ls3RTlgOPUvTgubKNUVoUF4vgAZvkK0CkFklcf2tn8HUYAKhPUoPVis xdz3jvlXauofyA/+MzOpWSzVVZE61CnyqId0isLzBzAT5aV/7LSQ7nI87Sw+4knx ZIfhHLqFTRiwAPxczXmA6iTAGodAlrI9u0qUAl2xjFcLD80QrMmDuWucCVoYqALp s8m+17pwPfb3zq0w4AM6INwddfWZbLv5pZpf22LU1i6fb3WhysDrU0/zvW4Kb2xh 3E1v8pAOIJr1kJ/jZy80FDPYcFVyvec1m7Iw/QfB2eiy8Q3KVanFN4CCMcPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUylY50bBeUbPkFlamQhC8g3q2x5gwHwYDVR0j BBgwFoAUwXMlcYEMnUl2zRpH1VhHJs8Mx70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMC9DMTczMjU3MTgx MEM5RDQ5NzZDRDFBNDdENTU4NDcyNkNGMENDN0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3MjZDRjBD QzdCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzAvQzE3MzI1NzE4MTBDOUQ0OTc2Q0QxQTQ3RDU1ODQ3 MjZDRjBDQzdCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh95EWwDezSUunNi+Pma+86peJmd7bJqbEn tu+1R5BHIQKpjs8ZCKPdA6wqA8X7x6h6ITl93wyYiJhshBxNX/YE7rS5eV4MIUcj mC3ditLWMHVRYniW9e8ilkB4RXZEt9gmxoZVdeelnUv2DkHQxfXmaJKZhqlmbmOq M+mvKqolOi4cgEiZOnOi4/j5guwLeHSoLbPiT4e1EhgtCQYj16Aw8cZqh1wXg+wa T7sYuYjns7DgUcwv2ZOOAWtidd4Y/gdQebjLHeyNitQgMtciZd3a5l5fu8tvtmWj BBVPpKYyeR/GZNocXwok5St7NVxpNjFbfVfzZG16nL+k7hi7gSM= -----END CERTIFICATE-----Generated at Fri Apr 17 16:26:54 2026 by rpki-client